993 matches found
Дырка в Serv-U (directory traversal)
С помощью команды cd ..20. можно подняться в директорию более высокого уровня...
Serv-U CD Command Encoded Traversal Arbitrary File/Directory Access
The remote host is running Serv-U FTP server. The installed version fails to properly sanitize user-supplied input to the 'cd' command. An attacker could exploit this flaw to access arbitrary files on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
Serv-U FTP directory traversal vunerability (all versions)
===================================================================== Securax-SA-09 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Catsoft serv-U FTP Directory Transversal Vulnerability Announced: 2000-12-03 Updated...
Securax-SA-09.serv-u
===================================================================== Securax-SA-09 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Catsoft serv-U FTP Directory Transversal Vulnerability Announced: 2000-12-03 Updated...
CVE-2000-1033
CVE-2000-1033 affects Serv-U FTP Server. An attacker can bypass the anti-hammering feature by first logging in as a valid user (possibly anonymous) and then attempting to guess the passwords of other users, enabling unauthorized access attempts. The CVSS details indicate network access, no authen...
CVE-2000-1033
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...
CVE-2000-0837
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...
Атака "грубой силы" против Serv-U (bruteforcing)
Можно обойти защитный механизм, ограничивающий число попыткок, перемежая ввод имени и пароля с аннонимным логином...
FTP Serv-U 2.5e vulnerability.
================================================================= Blue Panda Vulnerability Announcement: FTP Serv-U 2.5e 04/08/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: Sending FTP Serv-U a string...
servu25e.txt
================================================================= Blue Panda Vulnerability Announcement: FTP Serv-U 2.5e 04/08/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: Sending FTP Serv-U a string...
Serv-U 2.5e Null Byte Saturation DoS
It is possible to crash the remote FTP service by sending it a large number of null bytes. An attacker could exploit this flaw to deny access to the FTP server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10488; scriptversion"1.35"; scriptcvsdate"Date: 2018/11/15...
CVE-1999-0838
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...
CVE-1999-0838
Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...
Various Lame Stuff
Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...
CVE-2000-0176
The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...
CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...
CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...
CVE-2000-0129
The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...